Skip to content

[Backport 8.x] Add managed dependency on JOni 2.2.7 - #737

Merged
Sharpie merged 1 commit into
8.xfrom
backport-736-to-8.x
Oct 28, 2026
Merged

Sharpie merged 1 commit into
8.xfrom
backport-736-to-8.x

Conversation

@OpenVoxProjectBot

Copy link
Copy Markdown
Collaborator

Description

Backport of #736 to 8.x.

This commit adds `org.jruby/joni` to the managed dependencies list at
version 2.2.7. This release contains security fixes for parser overflows
in regular expression patterns:

See: jruby/joni#90

Signed-off-by: Charlie Sharpsteen <charlie@overlookinfratech.com>
(cherry picked from commit 1cd64c0)
@Sharpie Sharpie added the security Related to a security issue label Oct 28, 2026
@github-actions

Copy link
Copy Markdown
Contributor

The rpm/deb packages and the JAR file for openvox-server are available in a zip archive:
https://github.com/OpenVoxProject/openvox-server/actions/runs/40663200052/artifacts/12804274848

@Sharpie
Sharpie disabled auto-merge October 28, 2026 09:31
@Sharpie
Sharpie enabled auto-merge October 28, 2026 09:34
@Sharpie
Sharpie merged commit e462f11 into 8.x Oct 28, 2026
17 checks passed
@Sharpie
Sharpie deleted the backport-736-to-8.x branch October 28, 2026 09:35
@Sharpie Sharpie removed the security Related to a security issue label Oct 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants